From Dev.to
Python tarfile extraction needs an explicit filter policy
Python tarfile extraction needs an explicit filter policy An archive extractor turns bytes supplied by someone else into filesystem writes. That makes every extraction path a write primitive, even w...